10539 matches found
EUVD-2026-74468
Improper input validation in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy into a privileged page via crafted network traffic. Chromium security severity: Low...
CVE-2026-87490
Information leak in Transactions Platform in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...
EUVD-2026-74459
UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to spoof address bar via a co-installed app. Chromium security severity: Low...
EUVD-2026-74462
Information leak in Transactions Platform in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...
CVE-2026-87565
Information leak in Passwords in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to leak sensitive information via a crafted HTML page. Chromium security severity: Low...
CVE-2026-87565
CVE-2026-87565 is an information disclosure vulnerability in Google Chrome for Android prior to 153.0.8010.36 , affecting the Passwords component. A remote attacker can exploit it by serving a crafted HTML page to leak sensitive information, with no privileges required but user interaction necess...
CVE-2026-87617
Use after free in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...
CVE-2026-87459
Observable discrepancy in Select in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...
CVE-2026-87620
CVE-2026-87620 affects the SVG rendering component in Google Chrome prior to 153.0.8010.36 . An observable discrepancy in SVG processing allowed a remote attacker to obtain sensitive information by serving a crafted HTML page. The vulnerability requires user interaction (visiting a malicious page...
CVE-2026-87620
Observable discrepancy in SVG in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...
CVE-2026-87620
Observable discrepancy in SVG in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...
EUVD-2026-74451
Observable discrepancy in Select in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...
CVE-2026-87543
Missing authorization in Core in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Low...
CVE-2026-87543
Missing authorization in Core in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Low...
CVE-2026-87656
CVE-2026-87656 is an improper state validation vulnerability in Google Chrome's Safebrowsing component, affecting versions prior to 153.0.8010.36 . A remote attacker could exploit it via a crafted HTML page to bypass system access restrictions . The NVD assigns a CVSS 3.1 score of 5.4 (MEDIUM) wi...
CVE-2026-87543
Google Chrome prior to 153.0.8010.36 contained a missing authorization flaw in the Core component. A remote attacker who had already compromised the renderer process could exploit it via a crafted HTML page to bypass site isolation , a key sandboxing boundary in Chrome's multi-process architectur...
EUVD-2026-74442
Improper input validation in Chromium in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to spoof UI elements via crafted network traffic. Chromium security severity: Low...
CVE-2026-87511
Missing authorization in DevTools in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted Chrome extension. Chromium security severity: Low...